Privacy Policy & Sovereign Data Standard

1. Data Controller

The data controller responsible for the processing of your personal and commercial data on Global Fashion Suppliers is Ribbsaeter Systems. For inquiries regarding data protection, access requests, or regulatory compliance, you may contact the sovereign data desk directly at legal@globalfashionsuppliers.com or privacy@ribbsaetersystems.com.

2. Categories of Data Processed

We collect and process the minimum necessary information required to operate a secure B2B sourcing platform:

• Account & Access Data: Business email address, corporate brand name, session tokens, and member vault unlock history.
• Financial & Billing Records: Subscription state, token balance, and transaction history. All card processing is handled securely by Stripe under PCI-DSS Level 1 compliance; GFS never stores raw payment card numbers.
• Search Telemetry: Anonymized search queries, country filtering, and category demand used to optimize manufacturing cluster indexing and prevent scraper abuse.

3. Verified Commercial Directory Information

The manufacturer records indexed on GFS represent legitimate commercial manufacturing entities operating within global apparel, textile, and tannery clusters. This information is processed under GDPR Article 6(1)(f) (Legitimate Interest) to facilitate lawful B2B trade, eliminate supply chain opacity, and support ethical garment manufacturing. Makers may request verification updates or record updates at any time through our verified maker desk.

4. Absolute Zero Data Broker Sale

We maintain an absolute, permanent prohibition on selling, monetizing, renting, or trading user, member, or manufacturer data to advertising exchanges, data brokers, or third-party AI training consortia.

5. Cookies & Edge Security Telemetry

We do not utilize invasive third-party cross-site tracking cookies. We utilize strictly necessary session identifiers, CSRF security tokens, and transient IP-based rate limiting hashes at the network edge to defend against automated scraping, DDoS attempts, and unauthorized database exfiltration.

6. Your Rights Under GDPR

Under the European General Data Protection Regulation, you hold the following irrevocable rights:

• The right to access your personal data (Art. 15 GDPR).
• The right to rectification of inaccurate data (Art. 16 GDPR).
• The right to erasure / “right to be forgotten” (Art. 17 GDPR).
• The right to restriction of processing (Art. 18 GDPR).
• The right to data portability (Art. 20 GDPR).
• The right to lodge a complaint with a supervisory data protection authority.